Stored Cross-Site scripting (XSS) vulnerability found by ThreatPress Research Team in WordPress Mass Pages/Posts Creator plugin (versions <= 1.2.2).
3 June 2018 - plugin still closed by WordPress Security team, no patched version available.